Cookie Policy
Last updated: 2026-06-10
We use cookies and similar technologies to operate the site and, with your consent, for additional features and statistics. You can change your choices at any time from “Cookie settings”.
1. What cookies are
Cookies are small files stored by your browser. We use them by category, and non-essential ones are enabled only after your explicit consent.
2. Categories
- Strictly necessary — authentication, security (CSRF), remembering your cookie choice. Cannot be disabled. Basis: legitimate interest / technical necessity.
- Functional — extra features such as the WhatsApp contact button and embedded maps. Basis: consent.
- Analytics — anonymous usage statistics via Plausible (cookie-less, no profiling). Basis: consent.
- Marketing — currently inactive; would be used for relevant content and offers. Basis: consent.
3. Consent duration and renewal
Your choice is stored locally and recorded for audit. We will ask for your consent again after 12 months or when we update the cookie list.
4. Managing preferences
You can accept, reject or customize categories at any time via the “Cookie settings” button in the page footer. You can also delete cookies from your browser settings.
5. List of cookies and storage entries in use
The table below lists all cookies and localStorage entries currently active on this site:
| Nume / Cheie | Scop | Durată | Categorie |
|---|---|---|---|
| next-auth.session-token (or __Secure-next-auth.session-token in production) | Auth.js session cookie — keeps you signed in between HTTP requests. | Session (deleted when the browser is closed) or 30 days if “Keep me signed in” is selected | Strictly necessary |
| next-auth.csrf-token (or __Host-next-auth.csrf-token in production) | CSRF token generated by Auth.js — protects sign-in forms against cross-site request forgery attacks. | Session | Strictly necessary |
| vetclinic.cookie-consent.v2 (localStorage) | Stores your cookie consent preferences (accepted categories and policy version). This is not an HTTP cookie — it is stored solely in localStorage on your device. | 12 months — after which you will be asked again | Strictly necessary |
| vetclinic.consent-anon-id (localStorage) | Anonymous per-browser identifier (random UUID) used solely to correlate consent records from the same visitor in the GDPR audit log. Contains no personally identifiable data. | Persistent (until manually cleared or browser reset) | Strictly necessary |
| Plausible Analytics (cookie-less) | Anonymous usage statistics (pages visited, traffic source). Plausible uses a daily anonymised fingerprint — no cookie is set and users are not tracked individually. | No cookie / local storage | Analytics (no cookie; active only with consent for the “Analytics” category) |